Who needs clocks when you can have these 🀩

New toys

Reply to this note

Please Login to reply.

Discussion

Need some, where from? Can I pay in Sats?

I bought from Yubico official website. Not sure if sats were an option πŸ€”

It was 50% off a while ago and I didn’t buy any 🀦

shopinbit might have it

πŸ˜‚ only a matter of time someone brought this up. No, there don’t have that vulnerability.

dont open them . return them and get solokeys

Never heard. Any good? I love yubikeys already have some of the older model

I prefer making my own

Who needs clocks when you could have sats instead?

Dude, where've you been...

I have the old ones like yours but they have a vulnerability. Besides, I wanted usbc

Same. Moved to USB-C + NFC

Picked up 3 of them, with the covers.

I actually made a replica out of aluminum so that I could form hot Kydex over it to make snap on protective covers. Worked great, but when I switched to USB-C I didn't have the energy to make a new metal template.

Cool! I was wondering if they’d ever have some nice case for it or a flip cover. Would love a sleek design one

There's a bunch of 3D printable one on ThingiVerse

The vulnerability doesn’t make sense though.

Sure, someone can clone your YubiKey.

But they can also just tap to log into any website they want without cloning it if they stole it.

Does it reveal which websites they have keys for? I assumed that was the issue.

No. You can already do that without an attack if you use resident keys. (aka passkeys *without* a username)

This only means that someone with your PIN and extended access can clone it.

Did y'all read the vulnerability in detail? If you don't have access to near perfect lab conditions and incredibly expensive high-end equipment you cannot do this. In other work, this is a theoretical vulnerability for most. I was able to switch to new Yubikeys, but transitioning my passkeys and other creds was a PITA.

Yeah somewhat. I mostly upgraded for usbc. Vuln. fix is a bonus

I did

Welcome to the yubi fam!

Been in the fam for a while! This is just an upgrade 🫑

These are cool, and I've been using one for auth to github and a few other places for many years now.

But what if you could code a NIP-46 bunker and run them on one of these: https://solokeys.com They have programmable ones and are open source. I haven't yet tried

Sounds awesome. Do they have usbc too? I’ll check it out.

I was part of their kickstarter and they sent me 4 keys: Solo V2 USB-A, Solo V2 USB-C, LE Solo V2 Hacker A, LE Solo V2 Hacker C

I guess NFC has been added to some models.